exec-with-env: Only export allow-listed environment variables

Also reimplement dump-user-env in Python so that we can maintain the
list of allowed and dumped environment variables in one place.